Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'json' = '%APPDATA%\java\json.exe'
- %APPDATA%\sysinfo.txt
- %APPDATA%\java\json.exe
- %APPDATA%\java\ha8dszhwkkauto.txt
- %APPDATA%\sysinfo.txt
- %APPDATA%\sysinfo.txt
- 'fi###.#00webhost.com':34868
- 'fi###.#00webhost.com':42531
- 'fi###.#00webhost.com':42773
- 'fi###.#00webhost.com':21
- DNS ASK fi###.#00webhost.com
- '%APPDATA%\java\json.exe'